Article 17 - Requirement to record operations and notify the QFC Authority
(1) A Data Controller must establish and maintain a record of all wholly or partly automatic Personal Data Processing operations or set of such operations intended to secure a single purpose or several related purposes.
(2) The QFC Authority may make Rules prescribing:
(A) the information in relation to Personal Data Processing operations that must be recorded for the purposes of Article 17(1);
(B) the circumstances in which a Data Controller must notify the QFC Authority of any operations referred to in Article 17(1); and
(C) the content of any such notification.